Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A08E4D220E1D11EEADC573494AD9E6FC.roa
File: A08E4D220E1D11EEADC573494AD9E6FC.roa (raw, json)
Hash identifier: daqJ61aR9QQAscBu2z8/Hz72JR4YNml0sqMHKEVG7d8=
Subject key identifier: 38:92:55:70:0A:6B:CC:15:7B:70:A5:70:72:D6:32:EC:AF:D1:30:0F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0C14
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A08E4D220E1D11EEADC573494AD9E6FC.roa
Signing time: Sun 18 Jun 2023 21:18:10 +0000
ROA not before: Sun 18 Jun 2023 21:18:07 +0000
ROA not after: Wed 18 Jun 2025 21:18:07 +0000
asID: 20473
IP address blocks: 102.129.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3092 (0xc14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 18 21:18:07 2023 GMT
Not After : Jun 18 21:18:07 2025 GMT
Subject: CN=648f7492-28b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:66:39:d4:17:35:4a:f7:ab:3f:80:fb:87:
4f:c6:d3:a6:e7:be:c4:12:7e:f8:a2:da:4d:17:00:
db:fc:33:94:f9:b9:87:df:15:f0:dc:37:13:c5:0f:
8a:a0:ea:3d:39:1a:f1:cb:42:14:7e:48:5f:0e:9d:
11:44:92:d5:4e:27:c7:0e:63:a1:2f:4a:39:d3:0a:
60:c8:90:1a:97:12:1a:61:e3:7e:5c:a5:fc:24:60:
2a:12:98:65:0f:43:a3:f1:bc:2b:9d:91:b9:4a:b0:
99:54:d0:04:d1:64:4f:2d:0d:88:9e:82:5d:ba:59:
b8:e3:0f:74:c9:e4:70:2e:fd:2c:fd:f6:38:49:62:
4e:ea:df:b3:34:6c:19:b1:4c:e6:ff:2d:82:93:5a:
20:5a:2f:77:bf:e5:26:e9:27:27:07:5d:20:d5:dc:
3b:8f:93:dd:e3:e0:30:34:d8:40:29:6a:a8:4d:29:
85:17:3e:b0:b2:0b:f3:c9:44:b2:a4:9b:28:11:9c:
6a:b7:62:ce:c1:0a:4c:b9:0f:db:c6:fd:07:6b:e5:
98:b4:99:76:ff:89:70:ea:37:c9:db:d8:bc:cc:14:
bd:3b:e3:8b:05:da:24:10:ca:ec:5d:8c:b6:9f:6c:
55:4d:15:9d:ad:81:e6:85:f8:1f:c8:8c:98:3b:44:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:55:70:0A:6B:CC:15:7B:70:A5:70:72:D6:32:EC:AF:D1:30:0F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/A08E4D220E1D11EEADC573494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.180.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:9d:3f:03:83:27:85:19:14:a4:14:f4:5d:fb:b8:77:85:f4:
c6:1f:46:ad:e8:b2:e5:83:88:20:d9:e6:f3:4e:3b:1f:c0:52:
d9:1b:77:8f:38:ad:20:96:48:d5:9b:d8:5e:32:da:d5:8a:ce:
9b:74:58:a1:99:3a:fb:a0:fa:c0:ba:93:0e:07:15:02:20:75:
72:3b:f8:3a:1d:1c:b3:12:ac:d4:f5:cf:f8:c1:d5:bd:90:ac:
e3:75:c6:b1:09:7d:8b:b3:e2:ca:52:23:d9:dd:92:2b:d5:71:
1f:f4:63:2f:bf:4a:47:86:92:e5:0d:87:15:10:6a:e2:e2:e7:
ef:68:29:dd:43:d3:4f:8a:c5:bb:da:e5:7c:53:d9:62:44:8f:
1c:66:b8:0e:8d:89:8b:5a:fb:fd:5a:c6:1e:2d:f1:30:a1:f4:
9f:0b:66:f2:8c:6e:3c:71:f6:b2:01:2f:18:80:4d:c1:3c:8d:
3a:32:b5:7a:e0:ad:fe:6b:e1:ef:2c:f5:ac:5a:78:e6:f8:28:
2c:1a:7b:81:a5:25:b3:a7:c5:49:46:22:42:2e:50:34:32:d6:
48:89:22:3a:9f:95:3c:8f:fd:fd:5b:8d:69:ea:c9:30:0e:ca:
5c:77:b7:f1:d0:b2:db:68:0e:b7:c7:fb:59:92:76:8c:3d:b6:
c2:5d:d2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 03:19:23 2023 by rpki-client on console-fra.rpki-client.org